Online Shopping System vulnerabilities

A flaw in code-projects Online Shopping System 1.0 affects the mysqli_query function in admin/adduser.php. Manipulation of the mobile argument can lead to SQL injection. The attack may be performed remotely. The exploit has been published and may be used.

A cross-site scripting (XSS) vulnerability was found in code-projects Online Shopping System 1.0 in /offersmail.php. Manipulation of the email argument allows remote script execution in the victim's browser. The exploit is public.

A vulnerability has been found in code-projects Online Shopping System 1.0. Affected is an unknown functionality of the file /admin/sumit_form.php. Manipulation of the argument Success leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

A cross-site scripting vulnerability has been detected in Online Shopping System 1.0 by code-projects in file offersmail.php. Manipulation of the email argument leads to XSS. The attack can be performed remotely, and the exploit is publicly available.

A SQL injection vulnerability has been found in the Online Shopping System 1.0 by code-projects. It affects an unknown function in the file /login.php of the Login component. Manipulation of the email argument results in SQL injection. The attack can be performed remotely, and the exploit has been made public.